Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: Bg7xhQrr4jlJF/M4KF2oBoSY0q2fG815ZfGqim8fxts=
Subject key identifier: 33:88:B7:A1:03:79:ED:92:B8:1C:5E:9B:2B:ED:9E:63:2E:EA:41:3D
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 0198898EE3711E120F7BC7D5CFD578C16D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 0500
Signing time: Fri 08 Aug 2025 12:01:39 +0000
Manifest this update: Fri 08 Aug 2025 12:01:39 +0000
Manifest next update: Sat 09 Aug 2025 12:01:39 +0000
Files and hashes: 1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: buYGB20MT2VowTWT7ylMVUlXAttGJO3kUuAcQKZq2ac=)
2: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (hash: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:e3:71:1e:12:0f:7b:c7:d5:cf:d5:78:c1:6d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Aug 8 12:01:39 2025 GMT
Not After : Aug 9 12:01:39 2025 GMT
Subject: CN=3388b7a10379ed92b81c5e9b2bed9e632eea413d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:c5:9f:03:a1:0c:1b:86:5c:65:86:4d:87:
4d:2e:5c:f5:7d:0e:95:50:5e:b6:54:7c:e0:c9:65:
1b:d9:a5:5d:aa:75:2c:a0:91:5a:4f:ef:fe:24:cc:
1b:88:2f:7b:28:1a:56:91:7d:d3:79:b0:71:17:b5:
a8:2a:e9:f7:36:e5:1e:b6:ab:f9:bd:cb:b4:7d:8c:
5f:9b:9a:36:df:50:78:47:b5:0f:10:6e:a7:c3:15:
16:2a:fe:27:9e:70:16:ca:38:c4:b1:6f:96:cd:2c:
7b:6c:62:7d:57:f7:0d:d2:c8:2b:15:b9:7f:cd:21:
09:4d:2c:1c:61:0d:ae:0f:81:aa:77:d6:25:13:5d:
e4:79:31:b7:4e:95:1e:49:d6:0e:36:ec:a3:e1:60:
31:88:b8:e2:3e:c3:0a:74:b0:bf:8f:fe:21:44:1d:
bc:a5:49:b9:c2:95:32:8b:a9:35:e2:c7:ef:46:c4:
b5:0e:e2:6b:1a:8b:5e:dc:2e:5d:bb:09:1e:1c:5b:
7b:76:37:cb:29:c5:a7:e2:30:90:7f:98:65:fb:81:
04:27:9a:b2:b7:3c:2f:de:d6:02:07:6f:1e:e4:46:
f7:4a:a5:39:25:e6:4f:7d:e9:0f:07:f1:cb:89:e0:
59:81:20:b8:f7:b5:1b:81:ef:ea:1e:4a:0a:a9:b6:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:B7:A1:03:79:ED:92:B8:1C:5E:9B:2B:ED:9E:63:2E:EA:41:3D
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:04:0a:5a:ac:b7:05:eb:8a:b5:dc:fa:4e:2d:70:11:6a:fa:
8c:50:13:2e:ed:3b:d7:6d:63:26:4e:c2:c6:38:38:f4:3c:13:
04:b5:5b:c5:d0:40:ac:70:8f:64:0f:f9:c8:43:a7:aa:d8:4b:
c7:29:e0:14:8d:51:fb:06:4c:35:b6:4f:ea:7f:c8:c9:b9:6b:
18:9c:c1:c3:34:46:52:53:85:80:3a:f5:8b:fd:bf:68:80:98:
f1:d4:71:ac:e8:01:a2:9c:55:ed:fa:45:34:a6:14:1d:af:b4:
44:a5:41:97:8e:e3:c3:82:bc:fc:61:c3:30:0d:14:7f:e0:1d:
37:99:20:cf:86:d8:1a:99:14:21:a3:34:7a:91:6f:8e:9e:f0:
c5:5f:ca:11:2c:3b:b9:9c:56:7a:af:c6:98:69:de:57:58:7f:
29:5e:03:20:1d:00:97:82:03:8b:76:8d:c3:ff:a3:4c:c1:31:
ac:f2:06:fc:8e:76:62:51:9b:5b:53:10:3d:90:b0:c1:7c:d1:
a7:9a:2e:11:b3:8a:77:2e:68:1b:2c:aa:60:cb:e8:f2:d6:ab:
86:d4:4c:dc:49:c6:e7:fd:32:5c:94:5f:71:6d:e4:76:ed:d2:
f5:9c:34:3c:27:ce:8b:cd:5f:7c:fe:46:53:9b:30:5e:35:0c:
4c:c3:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:15 2025 by rpki-client